This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

Resolved! EWS O365 Instance - Not allowed to access Non IPM folder. (85)

XSOAR stopped fetching incidents from our assigned email address on April 3rd. I opened the EWS O365 instance to investigate and did a "test" for troubleshooting and the test result shows: Error (April 9, 2024 11:14 AM) Not allowed to access Non IPM folder. (85) We did not make any settings changes to the instance. After doing some research...

Resolved! Select All in Data Collection multi select

Hi! We have a playbook which extracts indicators and adds it to a certain watchlist. In between, we allow user to select which indicators should be added by using Data Collection - Multi select / Array reply option. It is quite problematic slecting it manually when the selection is large, e.g. 100 entries. Is there a way to add a "Select all" ...

Antanas by • L2 Linker
  • 3813 Views
  • 3 replies
  • 0 Likes

Cortex XDR multi-tenancy on XSOAR

Hello there, I am going to have cortex XDR multi-tenancy on one XSOAR. however I cant switch between cortex XDRs on XSOAR. I would be grateful if you could help me in this field. And another problem is that, the configuration of Cortex XDR-IOC, I took an error of unauthorized access, user doesnt have the required license type to run this API. ...

Fetching Microsoft Defender for Office 365 Alerts

Greetings! Has anyone had any success ingesting Microsoft Defender for Office 365 alerts into XSOAR? We're currently fetching MDE alerts using the Microsoft Defender for Endpoint integration. I'd think that, because they share a portal, MDO alerts would also be fetchable using this integration, but I haven't had any success. Microsoft's do...

XSOAR Playbook - Crowdstrike Endpoint Update

Hi All,i am new to XSOAR playbooks but i have managed to get a playbook operational that accepts data from a Microsoft form and then updates a crowdstrike endpoint's tag information (this end point is hard coded atm via its ID).The automation (cs-update-device-tags) will only accept the Crowdstrike ID. Its a unique 32 character value, which is o...

SHobbins by • L1 Bithead
  • 3337 Views
  • 3 replies
  • 0 Likes

EWS V2 Integration Issue

Hi Everyoen, I have XSOAR integration with EWS V2, few days ago its working fine but now suddenly got an issue please see the screenshot and provide valueable answers. Error (March 27, 2024 3:42 PM) Script failed to run: Docker code runner got container error: [Docker code script is in inconsistent state, expected pong but didn't got any r...

Syedhkt by • L2 Linker
  • 2448 Views
  • 1 replies
  • 0 Likes

Xsoar Custome Widget

Hi, I am trying to create a custom widget that calculate follwing (Total Incident+ Total Command Execution) with date paramters adjusted by widget. I tried to implement this with JSON method and Automation Script but unable to get the solution. Can you suggest some solution and how this will be acheieved using automation script. Second questi...

Syedhkt by • L2 Linker
  • 1765 Views
  • 2 replies
  • 0 Likes

NFR Licence Query

Hello Live Community, I have a few questions regarding an NFR license that we currently have for an XSOAR Server. I want to create an HA configuration or use the existing license for a Dev server alongside the prod server. Does the license allow me to deploy these servers on the same license? Many thanks, Michael Rose Cortex XSOAR

Loading Loop upon login to Cortex xSOAR

Hello Team,We're experiencing an issue upon logging in to cortex where it will just loop the home page. Upon checking, the developer tools we find below error. 450 Unauthorized This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials or your browser does not understand h...

  • 1308 Posts
  • 46 Subscriptions
Top Solution Authors
View All
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks